Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
File: e8sSfHzXeGBylriDhuiUrh3jhb8.mft (raw, json)
Hash identifier: bJQiJfvQoTmgBGS+eTv54DQSHVRJw/JZC0KtQ35cVdI=
Subject key identifier: EC:34:4A:D9:2D:D8:47:0C:6A:83:8D:B7:43:30:EB:A7:7F:24:76:03
Authority key identifier: 7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
Certificate issuer: /CN=7bcb127c7cd778607296b88386e894ae1de385bf
Certificate serial: 019A725CAD5CC1C16384720658C26E5531E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
Manifest number: 037A
Signing time: Tue 11 Nov 2025 10:01:07 +0000
Manifest this update: Tue 11 Nov 2025 10:01:07 +0000
Manifest next update: Wed 12 Nov 2025 10:01:07 +0000
Files and hashes: 1: 5TJg2Iv73VFNhdExw4W7yWYaSDc.roa (hash: itYnIaMtVgddsFyZfv3i+VtQbQhHkGAFRlMGBpEoryI=)
2: Tzl5NFiih_Oo3si8dnUw8wkuo2I.roa (hash: 6Qg5GxXMwFQB8Qi2Ip90XrbOE+HYQ3G3PbvVVea81ok=)
3: e8sSfHzXeGBylriDhuiUrh3jhb8.crl (hash: RjY/w6KJEAxwa22KyCJ4JMxXxiCMk7TbaEQ4vZMXu2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ad:5c:c1:c1:63:84:72:06:58:c2:6e:55:31:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bcb127c7cd778607296b88386e894ae1de385bf
Validity
Not Before: Nov 11 10:01:07 2025 GMT
Not After : Nov 12 10:01:07 2025 GMT
Subject: CN=ec344ad92dd8470c6a838db74330eba77f247603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:de:c8:59:c7:8c:be:43:10:66:1b:02:f0:cd:
e5:84:b3:d2:fa:d1:d2:8b:69:30:38:ab:49:f8:ad:
d7:03:7d:ba:c9:b3:62:52:c3:9a:e0:46:8b:f6:cd:
ec:b9:07:34:07:f7:b0:07:fb:c0:b1:8d:d6:60:f1:
6d:92:51:25:e9:c1:94:de:29:e1:c9:fe:d9:f3:13:
c8:2f:6b:57:fe:a4:fb:29:cd:66:5d:d2:b2:38:1f:
6b:20:a1:a9:45:bd:4f:ae:7b:a7:1c:9e:17:d9:94:
7a:84:39:8d:1b:4d:51:e6:1f:04:30:25:05:b8:7b:
c2:e7:6a:78:b7:34:83:39:05:4c:ca:99:7e:a5:4c:
f9:ab:b4:34:f0:77:78:22:d3:db:f0:8d:25:94:da:
4a:0b:c5:32:c5:df:b6:e4:91:2d:c8:a5:43:55:cf:
77:39:6c:b7:8d:4f:93:7f:c2:76:ef:d0:7c:fa:91:
18:89:3a:ac:8c:06:2a:72:3a:c0:f0:b1:5f:70:fe:
81:c1:21:49:27:6a:7a:c0:13:d3:98:00:73:a6:25:
9a:7c:bb:9d:d7:98:9c:76:20:76:27:9e:aa:68:e4:
aa:e5:67:6c:70:c7:2f:f7:b7:be:59:a7:b5:16:fc:
38:76:06:4a:81:0c:9d:e2:4b:06:d8:c7:77:cd:a3:
34:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:34:4A:D9:2D:D8:47:0C:6A:83:8D:B7:43:30:EB:A7:7F:24:76:03
X509v3 Authority Key Identifier:
keyid:7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b2:82:e2:1d:12:00:e7:6c:55:70:9c:de:e1:0f:2b:91:81:
82:59:e7:17:5e:81:ae:10:5b:2f:78:4d:d2:da:f2:95:dd:6d:
ca:32:1b:a4:d6:1a:e3:8e:4e:6a:cf:55:9f:46:d6:ce:eb:41:
ef:a8:df:17:20:e9:cf:28:d1:71:ba:c5:f5:1a:cd:41:19:9a:
58:61:1f:37:07:ba:b1:11:60:fd:c4:ba:31:17:09:8e:f2:05:
23:ed:8f:28:fb:d9:e6:f6:3a:94:47:16:05:75:8b:ac:61:93:
12:1e:f2:ed:03:e1:38:c7:bd:bf:f6:8a:71:83:7e:95:19:e0:
62:9d:aa:df:1c:35:f7:d5:22:68:2b:65:9e:4a:a1:3e:fe:f1:
13:d8:a5:6a:f4:ad:be:6a:4b:b3:c0:42:6b:f9:bc:26:86:96:
fd:a2:d0:17:5b:c2:d7:e6:5a:45:6a:2f:65:76:a3:2c:06:59:
5f:ec:17:af:36:ed:f6:9a:76:ca:77:29:89:6e:81:3d:81:64:
2f:7b:37:05:ae:73:5c:36:41:8d:dc:17:5e:7d:09:92:4f:07:
23:93:ed:ae:98:57:61:1b:2b:d8:db:b8:a1:0b:06:dd:ac:c6:
6d:7c:73:3e:4e:b7:39:51:ff:ed:67:9b:71:b4:9e:47:7e:d1:
c5:b7:b9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:15:25 2025 by rpki-client